Learned about TwoFactorAuth.org and DongleAuth.info via Security Now podcast
From the latest episode (show notes - http://ift.tt/2nDTEvk) of the Security Now! podcast (http://ift.tt/2A0fwmb), learned about TwoFactorAuth.org and DongleAuth.info which will show what sites/services support software 2FA and USB dongle MFA, respectively.
Submitted December 07, 2017 at 07:59PM by volci
via reddit http://ift.tt/2nDTG6q
From the latest episode (show notes - http://ift.tt/2nDTEvk) of the Security Now! podcast (http://ift.tt/2A0fwmb), learned about TwoFactorAuth.org and DongleAuth.info which will show what sites/services support software 2FA and USB dongle MFA, respectively.
Submitted December 07, 2017 at 07:59PM by volci
via reddit http://ift.tt/2nDTG6q
Does anyone have any recommendations on a home security cameras?
No text found
Submitted December 07, 2017 at 07:52PM by tildodildo
via reddit http://ift.tt/2zZTgJu
No text found
Submitted December 07, 2017 at 07:52PM by tildodildo
via reddit http://ift.tt/2zZTgJu
reddit
Does anyone have any recommendations on a home... • r/security
1 points and 0 comments so far on reddit
An Etsy Engineer Made Earrings To Hold Your Two-Factor Security Keys
http://ift.tt/2zObtt9
Submitted December 07, 2017 at 08:47PM by EvanConover
via reddit http://ift.tt/2iDBq7W
http://ift.tt/2zObtt9
Submitted December 07, 2017 at 08:47PM by EvanConover
via reddit http://ift.tt/2iDBq7W
Motherboard
An Etsy Engineer Made Earrings To Hold Your Two-Factor Security Keys
Finally, a useful infosec accessory for a femme audience.
CTF365 - Blitz CTF write-up. 5 challenges, created for beginners.
http://ift.tt/2AC6e15
Submitted December 07, 2017 at 09:11PM by thel3l
via reddit http://ift.tt/2nCgy6s
http://ift.tt/2AC6e15
Submitted December 07, 2017 at 09:11PM by thel3l
via reddit http://ift.tt/2nCgy6s
Medium
CTF365 — Blitz CTF Writeup
Introduction
Banking apps vulnerable to MITM. Spinner: Semi-Automatic Detection of Pinning without Hostname Verification
http://ift.tt/2k1LoQP
Submitted December 07, 2017 at 10:59PM by americanmonty
via reddit http://ift.tt/2nERL1h
http://ift.tt/2k1LoQP
Submitted December 07, 2017 at 10:59PM by americanmonty
via reddit http://ift.tt/2nERL1h
My VK acvount has been hacked
Today I've tried to log in to my account and I found out it had been blocked by the vk staff. After I managed to log in to it I saw a job offer on my wall posted in russian and a lot of private messages.Работа в вашем городе! Свободный >график! Обучение за счет фирмы! Зарплата от 55 000 до 80 000 в >неделю , И ЭТО РЕАЛЬНО !! Не >интернет, не пирамида, не косметика >=) Ждем Вас! Собеседование через >защищенное приложение телеграмм. Мои контакты там-@DZ91199 >( Money )262/5000 Rabota v vashem gorode! Svobodnyy >grafik! Obucheniye za schet firmy! Zarplata ot 55 000 do 80 000 v nedelyu , >I ETO REAL'NO !! Ne internet, ne >piramida, ne kosmetika =) Zhdem Vas! Sobesedovaniye cherez >zashchishchennoye prilozheniye >telegramm. Moi kontakty tam-@DZ91199 ( Money )Work in your city! Free schedule! Training at the expense of the company! Salary from 55 000 to 80 000 per week, >> AND IT IS REAL !! Not the Internet, not the pyramid, not the makeup =) Waiting for you! Interview via secure >>telegram application. My contacts there- @ DZ91199 (Money)My password hadn't been modified and I immediately changed it. I had my phone number linked to my profile settings but the two step verification was disabled because I kept missing the verification messages with my current smartphone.The mail and password used is not linked to any other account.What else am I supposed to do now?Should I reactivate the two step verification before deleting the account?
Submitted December 07, 2017 at 10:58PM by 8412286215E
via reddit http://ift.tt/2AEmgcy
Today I've tried to log in to my account and I found out it had been blocked by the vk staff. After I managed to log in to it I saw a job offer on my wall posted in russian and a lot of private messages.Работа в вашем городе! Свободный >график! Обучение за счет фирмы! Зарплата от 55 000 до 80 000 в >неделю , И ЭТО РЕАЛЬНО !! Не >интернет, не пирамида, не косметика >=) Ждем Вас! Собеседование через >защищенное приложение телеграмм. Мои контакты там-@DZ91199 >( Money )262/5000 Rabota v vashem gorode! Svobodnyy >grafik! Obucheniye za schet firmy! Zarplata ot 55 000 do 80 000 v nedelyu , >I ETO REAL'NO !! Ne internet, ne >piramida, ne kosmetika =) Zhdem Vas! Sobesedovaniye cherez >zashchishchennoye prilozheniye >telegramm. Moi kontakty tam-@DZ91199 ( Money )Work in your city! Free schedule! Training at the expense of the company! Salary from 55 000 to 80 000 per week, >> AND IT IS REAL !! Not the Internet, not the pyramid, not the makeup =) Waiting for you! Interview via secure >>telegram application. My contacts there- @ DZ91199 (Money)My password hadn't been modified and I immediately changed it. I had my phone number linked to my profile settings but the two step verification was disabled because I kept missing the verification messages with my current smartphone.The mail and password used is not linked to any other account.What else am I supposed to do now?Should I reactivate the two step verification before deleting the account?
Submitted December 07, 2017 at 10:58PM by 8412286215E
via reddit http://ift.tt/2AEmgcy
reddit
My VK acvount has been hacked • r/security
Today I've tried to log in to my account and I found out it had been blocked by the vk staff. After I managed to log in to it I saw a job offer on...
When Scriptlets Attack: Excel’s Alternative to DDE Code Execution
http://ift.tt/2nCKY8z
Submitted December 08, 2017 at 12:06AM by teksquisite
via reddit http://ift.tt/2BL672j
http://ift.tt/2nCKY8z
Submitted December 08, 2017 at 12:06AM by teksquisite
via reddit http://ift.tt/2BL672j
Lastline
When Scriptlets Attack: Excel’s Alternative to DDE Code Execution
We've recently discovered a malicious Office Excel file that appeared to have the ability to download and execute malware. Examining the file, we saw no evidence of macros, shellcode, or DDE functionality. When scanning the
How to Hack a Turned-Off Computer, or Running Unsigned Code in Intel Management Engine
http://ift.tt/2BLl8SF
Submitted December 07, 2017 at 11:40PM by maxxori
via reddit http://ift.tt/2BRClK9
http://ift.tt/2BLl8SF
Submitted December 07, 2017 at 11:40PM by maxxori
via reddit http://ift.tt/2BRClK9
Cloudflare[.]Solutions Keylogger on Thousands of Infected WordPress Sites
http://ift.tt/2Ae6oyD
Submitted December 08, 2017 at 01:01AM by pesofr
via reddit http://ift.tt/2jpbFJe
http://ift.tt/2Ae6oyD
Submitted December 08, 2017 at 01:01AM by pesofr
via reddit http://ift.tt/2jpbFJe
Sucuri Blog
Cloudflare[.]Solutions Keylogger on Thousands of Infected WordPress Sites
A WordPress website infection includes keylogger malware that can steal sensitive information and credentials and uses a fake CloudFlare domain.
BSidesSF 2018 CFP is open!
http://ift.tt/2AWoYLr
Submitted December 08, 2017 at 03:18AM by reedloden
via reddit http://ift.tt/2jrAmF4
http://ift.tt/2AWoYLr
Submitted December 08, 2017 at 03:18AM by reedloden
via reddit http://ift.tt/2jrAmF4
BSidesSF
BSidesSF 2020 Call For Participation
The BSidesSF 2020 CFP is now closed. See all our amazing speakers February 22-24, 2020 in San Francisco.Questions? E-mail program [at] bsidessf.org
Week 48 in Information Security, 2017
http://ift.tt/2jrUqqH
Submitted December 08, 2017 at 03:30AM by undercomm
via reddit http://ift.tt/2ACDfvX
http://ift.tt/2jrUqqH
Submitted December 08, 2017 at 03:30AM by undercomm
via reddit http://ift.tt/2ACDfvX
Malgregator
InfoSec Week 48, 2017
The German Interior Minister is preparing a law that will force device manufacturers to include backdoors within their products that law...
Chrome 63 offers even more protection from malicious sites, using even more memory
http://ift.tt/2ACrupf
Submitted December 08, 2017 at 03:29AM by speckz
via reddit http://ift.tt/2ACDiYF
http://ift.tt/2ACrupf
Submitted December 08, 2017 at 03:29AM by speckz
via reddit http://ift.tt/2ACDiYF
Ars Technica
Chrome 63 offers even more protection from malicious sites, using even more memory
Google gives Administrators new ways to lock down the browser.
Searching for the perimeter in cloud security: From microservices to chaos | ZDNet
http://ift.tt/2AzIe0j
Submitted December 08, 2017 at 04:03AM by SecurityTrust
via reddit http://ift.tt/2A1euqk
http://ift.tt/2AzIe0j
Submitted December 08, 2017 at 04:03AM by SecurityTrust
via reddit http://ift.tt/2A1euqk
ZDNet
Searching for the perimeter in cloud security: From microservices to chaos
Where we encounter the problem of applying the most modern security model we have to the most capable data centers we run and discover the two may come from different eras.
How to secure service accounts
http://ift.tt/2BdzRJh
Submitted December 08, 2017 at 05:07AM by nzwasp
via reddit http://ift.tt/2jqtQhK
http://ift.tt/2BdzRJh
Submitted December 08, 2017 at 05:07AM by nzwasp
via reddit http://ift.tt/2jqtQhK
Security Breach Online
Securing Service Accounts - Security Breach Online
Service accounts are commonly created as part of an application's installation procedure and can lead to significant security risks
pass.sh - simple, secure, open source, password sharing service
https://pass.sh
Submitted December 08, 2017 at 05:53AM by jc_sec
via reddit http://ift.tt/2k7Dl4R
https://pass.sh
Submitted December 08, 2017 at 05:53AM by jc_sec
via reddit http://ift.tt/2k7Dl4R
reddit
pass.sh - simple, secure, open source, password sharing... • r/netsec
7 points and 3 comments so far on reddit
This Is Why Secret Questions For Authentication Are A Bad Idea
http://ift.tt/2zZvvRI
Submitted December 08, 2017 at 06:54AM by InternetBowzer
via reddit http://ift.tt/2A1WBYb
http://ift.tt/2zZvvRI
Submitted December 08, 2017 at 06:54AM by InternetBowzer
via reddit http://ift.tt/2A1WBYb
MlakarTechTalk
Knowledge Based Authentication and Data Breaches - Your Security Questions Are Belong to Us – MlakarTechTalk
@TroyHunt #DataSecurity #authentication #databreaches
Security Now 640 More News & Feedback | TWiT.TV
http://ift.tt/2zRnH4a
Submitted December 08, 2017 at 06:39AM by dmp1ce
via reddit http://ift.tt/2nBVRas
http://ift.tt/2zRnH4a
Submitted December 08, 2017 at 06:39AM by dmp1ce
via reddit http://ift.tt/2nBVRas
TWiT.tv
Security Now 640 More News & Feedback | TWiT.TV
This week we discuss the long-awaited end of StartCom & StartSSL, inside last week's macOS passwordless root account access and problems with Apple's patches, the question of A…
Elevation of Privilege vulnerability (CVE-2017-3891) in QNX Qnet
http://ift.tt/2Bg9cey
Submitted December 08, 2017 at 11:08AM by 2ROT13
via reddit http://ift.tt/2j6pOOK
http://ift.tt/2Bg9cey
Submitted December 08, 2017 at 11:08AM by 2ROT13
via reddit http://ift.tt/2j6pOOK
Midnight Blue
Elevation of Privilege vulnerability in QNX Qnet
In this blog post i will cover QNX's Qnet native networking protocol and an Elevation of Privilege vulnerability (CVE-2017-3891) i discovered in it.
Disco, or what happens when you attempt to merge the Noise and Strobe protocol frameworks
http://ift.tt/2j99s7V
Submitted December 08, 2017 at 03:31PM by davidw_-
via reddit http://ift.tt/2AmZOpM
http://ift.tt/2j99s7V
Submitted December 08, 2017 at 03:31PM by davidw_-
via reddit http://ift.tt/2AmZOpM
www.cryptologie.net
Disco
Yesterday I gave a talk at Black Hat about my recent research with Disco.
I've introduced both the Strobe protocol framework and the Noise protocol framework in the past. So I won't go over them again, but I advise you to read these two blog posts before…
I've introduced both the Strobe protocol framework and the Noise protocol framework in the past. So I won't go over them again, but I advise you to read these two blog posts before…
Disco: a plug-and-play protocol to encrypt communications and a cryptographic library in Golang
http://ift.tt/2kCYVCd
Submitted December 08, 2017 at 03:30PM by davidw_-
via reddit http://ift.tt/2nHaae6
http://ift.tt/2kCYVCd
Submitted December 08, 2017 at 03:30PM by davidw_-
via reddit http://ift.tt/2nHaae6
macOS High Sierra 10.13.1 insecure cron system
http://ift.tt/2BThGFI
Submitted December 08, 2017 at 03:29PM by lyinch
via reddit http://ift.tt/2AovEm0
http://ift.tt/2BThGFI
Submitted December 08, 2017 at 03:29PM by lyinch
via reddit http://ift.tt/2AovEm0